Medium
bc56fe18-f0f4-4f7b-96c2-40d376e0fd74
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
81f4f8e8-cac3-4865-a686-212f6c7f7b65
CAPTCHA in Thai <= 1.1 - Reflected Cross-Site Scripting
Medium
03733eb8-63c7-4798-9d87-e80a6112da6e
Daily Inspiration Generator <= 2.0 - Open Redirect
High
CVE-2014-5155
Theme My Login <= 6.3.9 - Local File Inclusion
High
CVE-2014-4598
wp-tmkm-amazon < 1.5.3 - Cross-Site Scripting
Medium
dcd7204f-d950-4fb8-beb2-d9f619824fa1
All in One SEO <= 2.2.4.1 - Privilege Escalation to Arbitrary Post Modification
Medium
60e4c186-5239-464d-be83-1b873f821b3e
All in One SEO <= 2.1.5 - Cross-Site Scripting
Medium
55a942b7-5d3e-4ddf-8bc3-61ff90a7fdbd
All in One SEO <= 2.1.5 - Missing Authorization
Medium
CVE-2014-4942
EasyCart <= 2.0.5 - Sensitive Information Disclosure
Medium
CVE-2014-4513
ActiveHelper LiveHelp Live Chat < 3.1.5 - Reflected Cross-Site Scripting
High
8a3da2af-2273-44ff-addd-1ac8a75e1c3d
All in One Social Lite <= 1.0 - Server-Side Request Forgery
Medium
CVE-2014-4527
EnvialoSimple: Email Marketing y Newsletters < 1.98 - Cross-Site Scripting
Medium
CVE-2014-4600
WP Ultimate Email Marketer <= 1.1.0 - Stored Cross-Site Scripting
Medium
CVE-2014-4536
Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting
Critical
c62d8146-e4b1-4c86-9d8a-c3a9bbfb0763
Profile Builder – User Profile & User Registration Forms Plugin < 1.1.60 - Authentication Bypass
High
e8efc5cf-3497-4426-a8a5-740783a7c2c9
Acumbamail < 1.0.4.1 - Sensitive Information Disclosure
High
CVE-2014-3848
iMember360 < 3.9.001 - Missing Authorization and Sensitive Data Exposure
Medium
CVE-2014-3844
TinyMCE Color Picker <= 1.1 - Missing Authorization
High
CVE-2014-3849
iMember360 3.8.012 - 3.9.001 - Missing Authorization
Medium
CVE-2014-3841
Contact Bank – Contact Form Builder for WordPress <= 2.0.19 - Cross-Site Scripting
High
CVE-2014-4531
Game Tabs <= 0.4.0 - Cross-Site Scripting
Medium
CVE-2014-125093
Ad Blocking Detector <= 1.2.1 - Full Path Disclosure
High
CVE-2014-100001
SEO Plugin LiveOptim <= 1.1.3 - Cross-Site Request Forgery
Medium
CVE-2014-0166
WordPress Core < 3.8.2 - Authentication Cookie Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.